Debian Security Advisory

DSA-684-1 typespeed -- format string

Ulf Härnhammar from the Debian Security Audit Project discovered a
problem in typespeed, a touch-typist trainer disguised as game. This
could lead to a local attacker executing arbitrary code as group
games.

For the stable distribution (woody) this problem has been fixed in
version 0.4.1-2.3.